← Back to home

Privacy Policy

Effective date: [Effective Date]

Template notice: This document is a starting-point draft, not legal advice. Have it reviewed by a qualified attorney — especially regarding COPPA (US) and GDPR-K (EU) — and replace every [bracketed] placeholder before publishing.

This Privacy Policy explains how Wonderbud Studio ("Little Roots," "we," "us," or "our") collects, uses, and protects information when you and your child use the Little Roots allowance app and this website (together, the "Service"). Little Roots is designed for families, and protecting children's privacy is central to how we built it.

1. Who this policy is for

Little Roots accounts are created and managed by a parent or legal guardian ("Parent"). Children use the app under their Parent's supervision and account. We direct this policy primarily to Parents, who consent on behalf of their children.

2. Information we collect

We collect only what is needed to operate the Service:

We do not require a child's last name, photo, precise location, or contact information to use Little Roots.

3. How we use information

We use the information above solely to provide and maintain the Service — to create and secure accounts, calculate allowances and interest, display goals and history, send essential account emails (such as password resets), and provide customer support. We do not use your family's information for advertising.

4. We do not sell or share your data

We do not sell, rent, or trade personal information. We do not share it with third parties for their own marketing, and Little Roots contains no third-party advertising or behavioral-tracking SDKs. We share information only with the service providers that help us run Little Roots (for example, our hosting and email-delivery providers), and only to the extent needed to operate the Service.

5. Children's privacy (COPPA)

Little Roots is intended to be used by children under the direction and control of a Parent, consistent with the U.S. Children's Online Privacy Protection Act (COPPA):

6. EU families (GDPR-K)

For families in the European Economic Area and the UK, our legal basis for processing is the Parent's consent and the performance of our service to you. Parents may exercise rights of access, rectification, erasure, restriction, portability, and objection by contacting us at the address below. You may also lodge a complaint with your local data-protection authority.

7. Data retention and deletion

We keep account information for as long as the account is active. To preserve a child's savings history and avoid accidental loss, deactivating an account marks it as inactive (a "soft delete") and retains its transaction history rather than immediately erasing it. If you want your data permanently deleted, contact us at [email protected] and we will permanently delete your account and associated personal data, except where we are required to retain limited records by law.

8. How we protect information

We use industry-standard safeguards, including encrypted connections (HTTPS), hashed passwords, and access controls on our systems. No method of transmission or storage is completely secure, but we work to protect your family's information and to limit who can access it.

9. Changes to this policy

We may update this policy from time to time. If we make material changes, we will update the effective date above and, where appropriate, notify Parents through the app or by email.

10. Contact us

Questions, requests, or concerns about privacy? Contact Little Roots at [email protected]. This Service is governed by the laws of Massachusetts.

Read our Terms of Service →